Network Extension fails to start due to lack of disk access permissions

[AlexandrPkhm]

Steps to reproduce

1. Launch AdGuard

Expected behavior AdGuard is running without issues

Actual behavior AdGuard fails to get started. "Some AdGuard services were not started correctly. AdGuard won't work correctly." message appears.

Description If the user folder is located on an external drive Network Extension fails to launch due to lack of permissions.

Logs contain the following error messages:

2022-10-25 19:42:05.211549+0300 [com.adguard.mac.adguard.network-extension:65567] E: (ADLocations[0x00007000013f5060]: +[ADLocations directoryWithUrl:title:attr:]) Cannot create App Group directory (file:///Volumes/SSDExt/Users/gamedev/Library/Group%20Containers/TC3Q7MAJXF.com.adguard.mac/): Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “TC3Q7MAJXF.com.adguard.mac” in the folder “Group Containers”." UserInfo={NSFilePath=/Volumes/SSDExt/Users/gamedev/Library/Group Containers/TC3Q7MAJXF.com.adguard.mac, NSUnderlyingError=0x600002575020 {Error Domain=NSPOSIXErrorDomain Code=13 "Permission denied"}}

2022-10-25 19:42:05.213582+0300 [com.adguard.mac.adguard:62040] E: (AANProxyServerHandler: logCallback) ANServiceManager: Start: +++Failed to get RPC service object: Error Domain=com.google.edo.service Code=-1000 "(null)" UserInfo={EDOErrorPortKey=EDOHostPort (no name) with port (60897) and serial number (host), EDOErrorRequestKey=Invocation request (F7DB3ED2-8EF2-4424-847A-B1AA2EA4B7B7) on target (600000074310) with selector (serviceWithConfig:error:), EDOErrorConnectAttemptKey=1, NSUnderlyingError=0x600000cac9f0 {Error Domain=NSPOSIXErrorDomain Code=61 "Connection refused"}}

Ticket where the issue was reported 669668